Tracking issue for sites broken by DPI protection

sfionov commented 2 years ago

When CoreLibs 1.9.69+ will be deployed to AG products, this list may be used for adding $stealth exclusions.

[ ] https://www.ghxi.com/
[ ] http://go.gov.il
[ ] https://www.thegioididong.com/
[ ] https://tvr.by/
[ ] https://pravo.by/
[ ] https://beltelecom.by/ but https://my.beltelecom.by/ works (comment)
[ ] https://blog.torproject.org/ but https://www.torproject.org/ works (comment)
[ ] https://github.com/AdguardTeam/CoreLibs/issues/1634
[ ] https://github.com/AdguardTeam/CoreLibs/issues/1636
[ ] https://github.com/AdguardTeam/CoreLibs/issues/1639

zubrRB commented 2 years ago

У всех или почти всех сайтов списка ошибка связана с механизмом ограничения по IP-адресу, включая блог Tor Project.

piquark6046 commented 2 years ago

There is a new issue.

https://github.com/AdguardTeam/AdguardFilters/issues/121547

PS. What about making $dpi instead of $stealth for many users in some regions like South Korea?

sfionov commented 2 years ago

@piquark6046 We have an issue about specifying separate features in $stealth rules, so you will be able to use $stealth=dpi

https://github.com/AdguardTeam/CoreLibs/issues/1224

zubrRB commented 2 years ago

I have this site opened without problems with Protect from DPI. Apparently, the same dependence on the IP-address.

mrrtarlan commented 2 years ago

@sfionov +bankrespublika.az

zubrRB commented 2 years ago

https://kun.uz/ru ERR_SSL_PROTOCOL_ERROR / ERR_CONNECTION_RESET / ERR_CONNECTION_CLOSED

zloyden commented 2 years ago

@sfionov bcee.snet.lu https://github.com/AdguardTeam/AdguardFilters/issues/123450

zubrRB commented 2 years ago

https://www.mil.by/ ERR_CONNECTION_RESET

jellizaveta commented 2 years ago

Exclusion for all domains from this issue was added in stealth whitelist. Please disable the Base filter before checking this problem.

Eugene-Savenko commented 2 years ago

[x] https://www.suwonlib.go.kr/

reported by: helpdesk ID 619136.

zloyden commented 2 years ago

@Eugene-Savenko fixed, update should be available in 1-2 hours. Now you can report such issues to https://github.com/AdguardTeam/AdguardFilters repo or here.

sfionov commented 2 years ago

@zloyden Since there was no apps releases with working $stealth exclusions for DPI, and new CL1.10 nightlies have $stealth=dpi rules, you may use $stealth=dpi in rules.

See https://github.com/AdguardTeam/CoreLibs/issues/1224 for a full list of options.

zloyden commented 2 years ago

@sfionov maybe later I will change the rules when the release versions will get new CL1.10. I will add new TODO comment. For instance, AdGuard for Windows does not have it now and your rule is incorrect. For now, rule with $stealth helps.

zubrRB commented 2 years ago

Данные изменения $stealth=dpi внедрены с версии AdGuard 7.11 nightly 2. Проверено — работает.

zloyden commented 2 years ago

Most users do not use the nightly version.

sfionov commented 2 years ago

@zloyden Okay, I didn't know that that CL1.9.69 had reached the stable app.

piquark6046 commented 2 years ago

[ ] https://www.lghellovision.net/

Reported by an anon https://listauthorschat.slack.com/archives/C010PK19W78/p1659441521291449

sfionov commented 2 years ago

https://www.dienmayxanh.com/

https://github.com/AdguardTeam/AdguardForAndroid/issues/4211

trmdi commented 2 years ago

https://www.dienmayxanh.com/

AdguardTeam/AdguardForAndroid#4211

https://www.thegioididong.com/ too.

sfionov commented 2 years ago

@trmdi It is already in list: https://github.com/AdguardTeam/AdguardFilters/blob/master/EnglishFilter/sections/whitelist_stealth.txt#L23

It is recommended to upgrade to version 3.6.9 where these exclusions work.

zloyden commented 2 years ago

dienmayxanh.com

Added to AdGuard Base, update should be available in 1-2 hours.

sfionov commented 2 years ago

ais.osym.gov.tr

https://github.com/AdguardTeam/AdguardForWindows/issues/4327

AdamWr commented 2 years ago

Another one - https://github.com/AdguardTeam/AdguardFilters/issues/125993 https://www.mojedatovaschranka.cz/

trmdi commented 2 years ago

Another one: www.bachhoaxanh.com

zloyden commented 2 years ago

@trmdi added to our filters.

trmdi commented 2 years ago

@trmdi It is already in list: https://github.com/AdguardTeam/AdguardFilters/blob/master/EnglishFilter/sections/whitelist_stealth.txt#L23

It is recommended to upgrade to version 3.6.9 where these exclusions work.

Hi, why is it blocked again today? It works normally when turning off the Stealth mode. Everything is up to date.

www.thegioididong.com

trmdi commented 2 years ago

I just found that thegioididong.com is already in the list:

https://github.com/AdguardTeam/AdguardFilters/blob/425669ced45729794a5d75e2554b959fb0a7bf2e/EnglishFilter/sections/allowlist_stealth.txt#L26

but it's not in: https://filters.adtidy.org/android/filters/2_optimized.txt Maybe a bug? Made a new issue here: https://github.com/AdguardTeam/AdguardFilters/issues/128113

zubrRB commented 2 years ago

https://www.mpt.gov.by

Oniqqqq commented 2 years ago

http://ric-ul.ru

zloyden commented 2 years ago

@Oniqqqq is that caused by DPI protection? I can't reproduce this on my end.

Oniqqqq commented 2 years ago

@zloyden one of our users reported that only when DPI protection is enabled, the site stops working. My colleagues from support team also saying that the issue has been reproduced.

zloyden commented 2 years ago

I got it, added to our filters.

piquark6046 commented 2 years ago